$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1704835c-e4bf-312d-83e7-72077560a29b.roa File: 1704835c-e4bf-312d-83e7-72077560a29b.roa (raw, json) Hash identifier: v/a1kK43aDjhemiPdmHuF9xJg5JeXq6Skyylw/FMzKs= Subject key identifier: 04:65:6C:72:CE:24:5D:80:32:EF:E9:4C:1D:8B:FE:50:32:1F:82:E3 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A57ADA450C423E6E91E5F6920 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1704835c-e4bf-312d-83e7-72077560a29b.roa Signing time: Sat 28 Jun 2025 15:25:57 +0000 ROA not before: Sat 28 Jun 2025 15:25:57 +0000 ROA not after: Fri 26 Sep 2025 15:25:57 +0000 asID: 9304 IP address blocks: 152.232.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:ad:a4:50:c4:23:e6:e9:1e:5f:69:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 28 15:25:57 2025 GMT Not After : Sep 26 15:25:57 2025 GMT Subject: CN=21e608aa-b8d7-4881-a9da-151def602057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:10:3b:5e:92:1a:9f:13:0b:26:49:85:0a:1a: e4:fa:f9:25:4b:b6:6f:a4:7e:bd:c4:4f:47:1a:bd: 8a:a8:3d:a6:60:84:79:2c:cc:e2:98:c7:f2:ed:73: 4d:10:e9:08:07:a2:30:e5:70:ad:fe:d9:b0:4d:6a: 1b:e5:96:10:15:b8:c8:40:71:9d:d1:3a:8f:a4:78: 8f:de:af:96:2f:52:ff:27:4a:d3:4f:03:77:6c:37: 3a:e0:c3:78:bd:7e:87:46:16:77:70:ad:87:9d:13: 47:21:34:3b:01:e5:f6:00:02:9d:a1:12:4e:2f:c2: 8b:30:ad:f3:e6:b5:43:db:86:00:0c:1a:8b:3d:ab: 06:88:02:85:e4:6c:eb:52:32:6a:b8:9f:f9:71:9d: be:f7:2c:c7:b3:3f:8e:76:41:0f:d5:4f:01:10:d9: 70:ea:ce:7d:6a:68:49:1a:17:66:37:86:6a:24:a7: d2:3d:0d:22:18:fb:f8:71:df:9e:52:03:29:d3:1c: 1d:c7:a8:cf:81:8b:03:62:6d:61:07:b5:db:82:31: d8:c4:a0:d5:00:a1:0e:60:4e:09:ea:13:2a:ff:c3: fc:ee:6d:f7:7b:b0:5e:1c:3f:93:68:9d:80:cb:8c: cf:0b:d4:0c:5b:31:16:87:90:a5:9c:50:a8:c6:69: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:65:6C:72:CE:24:5D:80:32:EF:E9:4C:1D:8B:FE:50:32:1F:82:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1704835c-e4bf-312d-83e7-72077560a29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:92:67:0b:65:f4:98:f5:ff:01:7e:9d:a3:b4:e9:3c:fd:87: 2f:c7:65:12:6e:92:61:ca:c6:97:57:ae:15:f1:a7:da:f1:bb: be:57:bf:3b:a8:8b:c7:80:4a:ce:69:69:5e:54:5f:e9:cb:e5: 11:86:1d:1d:d6:9b:15:66:67:77:7f:8b:95:a0:c4:4e:e0:ba: cf:9c:e1:ca:49:c7:40:5e:bb:84:f9:97:4d:2b:1a:c4:05:70: 8e:25:4a:b9:0f:bf:46:55:4e:c2:af:a9:f9:9f:e7:d9:9d:0c: a1:9f:da:87:e2:01:58:3b:47:6d:86:55:ee:c3:0a:3c:12:c6: 5f:29:b7:3d:1a:87:94:a7:02:7b:c1:b7:ce:21:48:08:89:df: 88:f1:83:80:c3:88:ec:f1:20:fb:34:97:64:eb:82:32:79:53: 64:04:58:f2:ac:d0:02:7b:45:8d:13:4b:f0:b2:b5:77:08:aa: 91:bc:c7:85:98:b5:11:60:0b:18:bb:2e:3e:69:95:28:d4:0a: 1a:03:02:b5:da:2b:8c:41:62:22:6f:7f:3b:d6:e2:5f:3f:22: c1:74:f4:6f:04:1b:44:20:4c:55:f8:31:6b:ec:70:01:2f:1f: 8a:1c:65:0d:eb:cd:c7:4a:7a:03:83:d8:f4:8e:cf:62:20:9b: 2b:c1:65:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXraRQxCPm6R5faSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDYyODE1MjU1N1oXDTI1MDkyNjE1MjU1N1owLzEtMCsGA1UEAxMk MjFlNjA4YWEtYjhkNy00ODgxLWE5ZGEtMTUxZGVmNjAyMDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxA7XpIanxMLJkmFChrk+vklS7ZvpH69xE9H Gr2KqD2mYIR5LMzimMfy7XNNEOkIB6Iw5XCt/tmwTWob5ZYQFbjIQHGd0TqPpHiP 3q+WL1L/J0rTTwN3bDc64MN4vX6HRhZ3cK2HnRNHITQ7AeX2AAKdoRJOL8KLMK3z 5rVD24YADBqLPasGiAKF5GzrUjJquJ/5cZ2+9yzHsz+OdkEP1U8BENlw6s59amhJ GhdmN4ZqJKfSPQ0iGPv4cd+eUgMp0xwdx6jPgYsDYm1hB7XbgjHYxKDVAKEOYE4J 6hMq/8P87m33e7BeHD+TaJ2Ay4zPC9QMWzEWh5ClnFCoxmmg2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARlbHLOJF2AMu/pTB2L/lAyH4LjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMTcwNDgzNWMtZTRiZi0z MTJkLTgzZTctNzIwNzc1NjBhMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmOiuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqSZwtl9Jj1/wF+naO06Tz9hy/HZRJukmHKxpdXrhXxp9rxu75Xvzuo i8eASs5paV5UX+nL5RGGHR3WmxVmZ3d/i5WgxE7gus+c4cpJx0Beu4T5l00rGsQF cI4lSrkPv0ZVTsKvqfmf59mdDKGf2ofiAVg7R22GVe7DCjwSxl8ptz0ah5SnAnvB t84hSAiJ34jxg4DDiOzxIPs0l2TrgjJ5U2QEWPKs0AJ7RY0TS/CytXcIqpG8x4WY tRFgCxi7Lj5plSjUChoDArXaK4xBYiJvfzvW4l8/IsF09G8EG0QgTFX4MWvscAEv H4ocZQ3rzcdKegOD2PSOz2IgmyvBZWQ= -----END CERTIFICATE-----Generated at Sun Jun 29 04:23:04 2025 by rpki-client